GEOMETRY AND ARITHMETIC OF VERBAL DYNAMICAL SYSTEMS ON 
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Abstract. We study dynamical systems arising from word maps on simple groups. We develop a 
geometric method based on the classical trace map for investigating periodic points of such systems. 
These results lead to a new approach to the search of Engel-like sequences of words in two variables 
which characterize finite solvable groups. They also give rise to some new phenomena and concepts 
in the arithmetic of dynamical systems. 
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1. Introduction 

The initial goal of the present paper was to get deeper understanding of what is behind re- 
cent results achieved in describing the class of finite solvable groups by identities in two variables 
|BGGKPPT] . [BGGKPP2] . |BWWj . Although the results were purely group-theoretic, it was clear 
that the key role is played by geometry and dynamics. Byproducts of this investigation seem to us 
not less interesting than the initial problem. 

We reformulated the original problem in the language of a verbal dynamical system on an 
algebraic group G (the notion of its own interest). We study these systems for the case G = SL(2), 
the most important for the initial group-theoretic problem. Towards this end, we 

• prove several surjectivity theorems for the classical trace map over finite fields; 

• introduce a new method based on the trace map and these theorems. 

This allowed us not only to explain the mechanism of the proofs from the above cited papers 
but to obtain a method for producing more sequences of the same nature. 

These arithmetic-geometric considerations led us to a new notion of residual periodicity of a 
dynamical system which reflects its local-global behaviour. This concept will hopefully yield new 
results in the arithmetic of dynamical systems on algebraic varieties. Here we present some primary 
examples and propose some conjectures. 

To be more precise, let F r+S be the free group with basis x\, . . . , x s , u%, . . . , u r , and let 



' wi(xi, . . . , X s ,Ul, . . . ,u r ), 



(1) 



_ W r {xx, ...,X s ,Ui,.. .,U r ). 

be an r-tuple of words in F r+S . Thus for any group G we obtain a self-map: 

D w : G r+S -> G r+S , (2) 

(g±, . . . ,g s ,vi, . . . ,v r ) i-> (gi, ■ ■ .,g s ,wi(gi, ...,g s ,vi,.. . ,v r ), . . . ,w r (gx, ...,g s ,vi,.. .,v r ). 

Choosing G to be a linear algebraic group defined over some field k, we thus find a polynomial 
self-map of the underlying affine variety G r+S attached to W. 
A set M C G r+S is called invariant if D W (M) C M. 

For our purposes it is important to introduce initial conditions and, for every group G, a so- 
called forbidden set. Let J = . . . , x s ), . . . , / r (xi, . . . , x s )) be words in F s . Then given G and 
(<7i, . . . , g s ) G G s we have an iterative sequence of r-tuples of elements of G: 

eo = (fi(9i, ■ ■ -,9s),-- ■ ,fr(9l, ■ ■ -,9s)), • • • , 

e n+ i = (wi(gi,. . .,g s ,e n ), . . . ,w r (gi, ■ ■ .,g s ,e n )), . . . 

We are interested in finding (gi, . . . ,g s ) such that the sequence eo, has certain properties. 

To find such (gi, . . . ,g s ), we add s extra "tautological" variables and obtain a self- map as in ([2]). 
Then given W, G and J, we have an iterative sequence: 

e' = (gi, ■ ■ -,gs,fi(gi, ■ ■ -,g s ), f r (gi, ■ ■ -,9s)), 

e' n+1 = D w (e' n ), . . . 

The forbidden set consists of the choice of an invariant set 1q C G r+S for every group G. 
We call the triple D = (W , J , Iq) a verbal dynamical system. We are interested in invariant sets 
disjoint from Iq. 

Remark 1.1. It is sometimes convenient to modify this general setup as follows. 

(i) It may happen that the r-tuple W depends on less than r + s variables (say, of 
only xi, . . . ? Xtj t < s : show up in W whereas the rest of the Xi only appear in the initial conditions 
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J). In such a case, we will restrict our dynamical system to G r+t (in particular, the forbidden set 
is also chosen inside G r+t ). See Example 11.41 below. 

(ii) One can fix an s-tuple (g° := . . . ,g°) £ G s and consider the corresponding "fibre" of our 
dynamical system Dyy : G r — » G r defined by 

D%((vi,.. .,v r )) = (wi(9i, ■■■,9°s,vi,.. -,v r ),.. .,w r (gl, . . . , g°, vi, . . .,v T )). 

In particular, for r = 1 we arrive at a self-map G —* G. This simplified system will be largely used 
in what follows. 

Example 1.2. Take s = 2, r = 1 and consider a triple Z?i consisting of 

W = ([xux -1 , yuy^ 1 }), 

J = {x~ 2 y~ X x), 
I G = {GxGx {1}}. 

The corresponding map is 

Dyy(x, y, u) = (x, y, [xux~ l , yuy' 1 ]) . 

The associated iterative sequence is 

e = x~ 2 y~ 1 x, ei = [x~ 1 y~ 1 ,yx~ 2 y~ 1 xy~ 1 ], e 2 = [xeix' 1 , ye x y~\ . . . 

A key step in our characterization of finite solvable groups [BGGKPP1| . [BGGK PP2] can now 
be reformulated as follows: 

Theorem 1.3. For G = SL(2,q) the dynamical system D\ has a fixed point outside Iq for every 
q>3. 

A key step to the characterization obtained in [BWWj can be reformulated in a similar way: 

Example 1.4. Take s = 2, r = 1, W = ([y~ 1 uy, u^ 1 ]), J = (x). As the variable x does not show 
up in W but only appears in J (and so t = 1), we proceed as in Remark ll.l( i) and consider the 
restricted system G 2 — > G 2 , (y,u) i— ► (y, [y^ x uy, u^ 1 }), with the forbidden set Iq := {G x {1}}. 
Denote this system by Z?2- 

The associated iterative sequence is 

e = x, e 1 = [y~ 1 xy,x~ 1 ], e 2 = [y~ l eiy, ej" 1 ], . . . 

The main result of |BWW| can now be read off as follows: 

Theorem 1.5. For G = SL(2,q) the dynamical system D 2 has a periodic point outside Iq for 
every q > 3. 

In the present paper we mostly restrict ourselves to considering the most important case G = 
SL(2, k) (though in Section U] we also consider the Suzuki groups). 

In the case G = SL(2, k) we introduce a new method based on classical results of Klein, Fricke, 
Vogt, Magnus from which it follows (see, e.g., [Pe2] ) that there is a polynomial map tp: A N (k) — > 
A N (k) making the diagram 

Qs+r i G sJrT 

TT TT (3) 

A N (k) — A N (k) 

commutative. Here tt is defined using the traces of products as in Theorem 13.11 below. 
In the case r = 1, t = 1 the projection tt: SL(2, k) 2 — > A 3 (k) is defined as 

n(x,y) = (tr(x),tr(xy),tr(y)). 
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In the case r = 1, s = 2 the map tt: SL(2, k) s — > A 7 (k) is defined as 

ir(x,y,u) = (tr(x), tr(y), tr(u), tr(xy), tr(xu), tr(yit), tr(xyu)), 

and the image of 7r is contained in a hypersurface Z C A 7 (see (|13p below for an explicit equation 
ofZ). 

We prove the following surjectivity theorems (see Theorems 13.41 and 13.101 below) . 

Surjectivity Theorem 1. For any point a = (so,uo,to) G A 3 (F,j) the set 7r _1 (a) C SL(2,q) 2 is 
nonempty. 

Surjectivity Theorem 2. For any point y £ Z(¥ q ) the set 7r _1 (y) C SL(2,q) 3 is nonempty. 

These surjectivity theorems allow us to obtain sufficient conditions for the existence of fixed 
points of the reduced (modulo p) dynamical system, uniformly in p, and treat concrete examples 
arising from jBGGKPPlj . [BGGKPP2] . |BWWj . 

On the other hand, the above dynamical reinterpretation of our group-theoretic problem leads 
to some interesting "local-global" properties of dynamical systems on algebraic varieties. By an 
AG dynamical system (AG stands for arithmetic-geometric) we mean a triple D = (X, V, tp), where 

• either X is an algebraic variety defined over a global field K, tp: X — ► X is a dominant 
endomorphism and V C X(K) is a subset invariant under tp; 

• or X is an C-scheme (O stands for the ring of integers in K), tp: X — > X is dominant and 
V C X{0) is a 93-invariant subset. 

A periodic point is a fixed point of an iteration tp^ of tp. Together with the system D = (X, V, tp), 
we consider its reductions D p = (X p , V p ,tp p ), where p ranges over all but finitely many places of K 
(see Section O for precise definitions). For each reduction, we consider the length t p of the shortest 
orbit C p which does not intersect the "forbidden" set V p C X p . If such an orbit does not exist, we 
set £ p = oo. We are interested in the distribution of £ p 's. More specifically, let M C N be the set of 
all primes p such that £ p = oo. Let iV = {£ p : p M}. 

• If M is infinite, we call the system residually aperiodic. 

• If M is finite, we call the system residually periodic. 

• If both M and N are finite, we call the system strongly residually periodic. 

Precise definitions, examples and discussion of these notions are the subject of Sectional 

Remark 1.6. According to a theorem of Hrushovski [Hr], tp has a periodic point in X(¥ p ) \ V(¥ p ) 
provided X is an affine F p -variety and V is a proper affine subset of X (¥ p stands for the algebraic 
closure of F p ). In contrast, we are only interested in periodic points in X(¥ p ). 

In this language our approach to the problem of characterization of finite solvable groups looks 
as follows. We consider word maps of groups G = SL(2,q). For every word map tp: G m — > 
G, m = 2, 3 (and an additional word / : G 2 — » G in the case m = 3) we define a verbal dynamical 
system (see, e.g., Examples ll.2[ II. 4p . Regarding the group as an affine variety, we obtain from 
a verbal dynamical system an AG dynamical system on an affine Z-scheme. (In Example 11.21 we 
have X = SL(2) x SL(2) x SL(2), V = SL(2) x SL(2) x {1}, tp(x,y,u) = (x,y, \xux~ 1 ,yuy- 1 ]), 
in Example Owe have X = SL(2) x SL(2), V = SL(2) x {1}, tp(y,u) = (y, w -1 ]).) The 

word map is a "good" candidate if and only if that system is residually periodic. Using the trace 
map we simplify the AG system by including it into a commutative diagram 



X 



X 



Y 



Y 



(4) 
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where tt is a surjective projection, denned over Z, and ip is the trace map (see Subsections 13. 1( 
13.21 for more details). Moreover, the dynamical system D' = (Y, tt(V),^) has special geometric 
properties allowing us to find out when it is strongly residually periodic. Note that tt is surjective, 
therefore if D' is strongly residually periodic then D is residually periodic. 

It is an interesting question what arithmetic or geometric conditions can guarantee residual 
periodicity (or aperiodicity) of a given dynamical system. Certainly, if the forbidden set V is 
empty then the system is residually periodic. 

The role of arithmetic may be demonstrated by the following example. 

Example 1.7. Let a and b denote distinct integers, and let H[x) = (x 2 — a)(x 2 — b)(x 2 — ab) + x. 
The polynomial H(x) defines a morphism H : A^ — > Ag. 

For every p the reduced morphism H p has fixed points. Indeed, if p\a or p\b, we have H p (0) = 0. 
If none of a and b is divisible by p, we can use the fact that the Legendre symbol is a multiplicative 
function and conclude that at least one of three numbers: a, b, ab, is a square modulo p. A square 
root of this number is then a fixed point of H p , so we have i p = 1. 

On the other hand, the morphism H : A^ — » A^ may have no periodic points. Indeed, according 
to |Naj . the period of a rational point for a monic polynomial cannot exceed 2, and Magma com- 
putations show that for a = 2, b = 3 there is no rational solution to the equation H(H(x)) — x = 0. 

This example shows that one of the reasons for residual periodicity may be the existence of 
periodic points defined over a splitting field. Polynomials of that kind were studied in |BBj . [Br], 
[BBH] . Eoj. 

As to geometric conditions, the dynamical system under consideration may happen to be residu- 
ally periodic because of the existence of invariant functions (say, when there is an "extra" coordinate 
on which cp acts trivially) as in the following simple example. 

Example 1.8. Let D = (X,V,<p), where X = A 2 , V = {(a,b) G X : a = ±1 or b = ±1 or a = 
or b = 0}, and tp(a, b) = (a 2 b, b). Consider the integral model V = (X, V, <£) where X = A%, V = 
{(a, 6) G X(Z) : a = ±1 or b = ±1 or a = or b = 0} and $(a,6) = (a 2 b,b). We have M = {2,3}. 
The variety of fixed points of <I> is a curve C = {(a, b) : ab = 1}, C f] V = {±(1, 1)}- Nevertheless, 
for any prime p > 3 we have C p \ V p ^ 0, i.e. l p = 1. 

These examples show that there are at least two general reasons for a dynamical system to 
be strongly residually periodic. The first one is purely arithmetic as in Example ll.7[ Our first 
observations show that even in the simplest cases of one-dimensional systems, arising questions are 
related to nontrivial arithmetical problems. In the case of elliptic curves, one of such problems 
has been solved by N. Jones by establishing a weakened version of the long-standing Koblitz's 
conjecture (see the appendix to the present paper). 

The second one is of geometric nature as for the trace map above. This map has an invariant 
function which leads to the dimension jump for the variety of fixed points. Once we can prove that 
this variety W is absolutely irreducible (or at least contains an absolutely irreducible component), 
we can apply the Lang-Weil estimates [LW] to conclude that there exists a fixed point on the 
reduction W q for q big enough. (Of course, if dimVF = 1, classical Weil's estimates (see, e.g., [FJJ) 
are quite enough.) 

We believe that residually periodic dynamical systems is an object worthy of investigation. The 
following particular case seems to be especially interesting. Consider a Z-scheme X, a dominant 
endomorphism (p of X, and define V as the union of all finite yj-orbits in X(X). Then V p is the union 
of orbits of the reductions of all preperiodic points of ip. In simple words, this means that in this 
case we are interested in the distribution of the smallest periods of the maps <p p not coming from 
preperiodic points of <p. To the best of our knowledge, such a classification of dynamical systems 
according to their "hidden" periodicity did not appear in the literature. 
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The structure of the paper is as follows. 

Section [3] contains a general framework of our method for the most important case G = PSL(2, q). 
The Suzuki groups are treated in Section 21 Applications to concrete sequences are contained in 
Section [SJ Section \6\ is completely devoted to the new notion of residually periodic dynamical 
systems. We give basic definitions, consider simple examples and state some conjectures. The 
appendix contains a theorem of N. Jones answering one the questions posed in Section 

2. Notation and preliminaries 

Recall that in [BGGKPPlj . [BGGKPP2j . |BWWj there have been exhibited explicit families 
a n (x,y), f3 n (x,y) of words in F2 allowing one to characterize the class S of finite solvable groups 
in the class of all finite groups as follows: 

A finite group G belongs to S if and only if there exists n such that G satisfies the identity J n (x, y) := 
[a n (x,y),0 n (x,y)] = 1. 

Here [a, b] = aba~ 1 b~ 1 denotes the commutator. 

As in the introduction, we produce these recurrence formulas using the dynamical viewpoint. We 
consider the dynamical systems D\ and D2 from Examples 11.21 and 11.41 respectively, and consider 
their fibres as in Remark II .l( ii). This means that for any group G we introduce the maps G —* G: 
Pu,v{w) := [uwu ,vwv ], cr u [w) := [jj -1 ™,™ -1 ]. Then the n-th term of the characterizing 
sequence can be written as the ra-th iteration of the map p (resp. a): 

ln{x,y) = p£l(rfo(x,y)) (5) 

(resp. 

ln (x,y) = a^\ l0 (x,y))), (6) 

where 70(2;, y) = x~ 2 y x (resp. 70(2;, y) = x). 

Suppose that S is a solvable group of derived length n. Then the recursive structure of the above 
formulas shows that j n (x,y) = 1 in S. To establish the converse statement, it is enough to show 
that the identity j n (x,y) = 1 does not hold in any finite minimal simple non-solvable group G. 
(That is precisely what was done in [BGGKPPlj . |BGGKPP2j . [BWW].) 

To establish this fact in the case of sequences of type ©, it is enough to show that there exists 
u = 2/0 £ G such that the map a u has a (non-identity) periodic point, i.e. there exist a positive 
integer m and an element 1 7^ g G G such that g can be written in the form g = j(x, yo) and 

a yo (9) = a yo(d)- (F° r sequence (|6|), that is precisely what was done in jBWWj .) It is important 
to note here that every point has a finite orbit (i.e. is preperiodic in the sense of [Sil] ) but a priori 
it can happen that all these orbits contain identity, which being fixed is the only periodic point. 
We need an orbit that never hits the identity, and therefore contains another periodic point. This 
explains our choice of the forbidden set in Examples 11.21 and 11.41 
Let us recall the list of minimal simple non-solvable groups [ThJ: 

(1) G = PSL(2,p), p = 5 or p = ±2 (mod 5), p + 3, 

(2) G = PSL(2, 2 p ), 

(3) G = PSL(2, 3 P ), p is an odd prime, 

(4) G = Sz(2 p ), p is an odd prime, 

(5) G = PSL(3, 3). 

Here Sz stands for the Suzuki group (twisted form of B2, see, e.g., |HB| for details). 
To obtain a characterization of finite solvable groups, we wish to find a word 92 G F2(x,y) with 
the following properties: 

(i) for any finite solvable group S there exists an integer n such that for every y G S the map 

ip~y^ : S — > S is the identity map (here <£ y {x) := <p(x, y)); 

(ii) for each finite simple non-solvable group G from the above list, there exists y G G such that 
the self-map <p y : G — > G has a non-identity periodic point. For the PSL(2) case, this fits into the 
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approach described in Section [TJ we consider the dynamical system (P<SX(2,Z), {1}, cp y ) and all 
its reductions. (Note that in our context, the difference between SL and PSL is negligible, see 
Remark 13.221 b elow . ) 

In order to satisfy condition (i), one has to impose some restrictions on (p. We shall discuss this 
matter in Section 

In the sequel, we shall consider two separate cases: G = PSL(2, q) and G = Sz(q) (the case 
of the single group G = PSL(3,3) is usually easy to handle). In each case we will show that the 
corresponding dynamical system D gives rise to a dynamical system D' in the space of traces (the 
trace map) as in diagram @. The trace map has special geometry: the set of its fixed points (or of 
periodic points of bounded period) has positive dimension. This allows us to formulate a geometric 
sufficient condition on <p in order to get a periodic point in every reduction. (See Section [6] where 
we dare formulate some general conjectures.) 

Further on we denote by A" x the affine space with coordinates xi, . . . , x n . 

For brevity, we denote G = SL(2,q). 

We will repeatedly use expressions of the form "a rational curve with n punctures" (even if our 
curve lies in an affine space) referring to an open subset of a projective curve of genus zero whose 
complement consists of n points (e.g., the curve xy = 1 in the affine plane will be referred to as a 
rational curve with two punctures). 

3. Case G = PSL(2,q) 

In this section we show how every word map gives rise to a dynamical system. Then we prove 
that this dynamical system may be included into a commutative diagram of type (|3J) (namely, 
diagrams © and (|14|) below). The idea is that it is sufficient to look for periodic points of the 
trace map ip. Indeed, if a point a is tp-per iodic, then all the points in the fibre over a are (/j-periodic. 
The problem is to show that this fibre is not empty. We first show how to construct the trace 
map, then we show that the projection is a surjective morphism for every reduction (Theorems 
13.41 and 13. lQj) . Specific geometry of the trace map allows us to give sufficient conditions for the 
correewponding dynamical system to be residually periodic (Theorems 13.61 and I3.2ip . 

Our method is based on the following classical fact ( [Vo] . [Fr] . |FK] . [Mai]) cited here from the 
paper [Ho] (see also [Ma2| . [Go] for a nice modern exposition of these results). 

Theorem 3.1. Let F = (oi, . . . ,a n ) denote the free group on n generators. Let us embed F into 
SL(2,Z) and denote by tr the trace character. If u is an arbitrary element of F, then the character 
of u can be expressed as a polynomial 

tr(n) = P(ti, ... ,t n , tu, ■■■ , *i2...n) 

with integer coefficients in the 2 n — 1 characters tj^..^,, = tr (a^a^ . . . a^), l<v<n, l<ii< 
i 2 < • • • < i v < n. □ 

Note that the theorem remains true for the group G = SL(2, q) (and, more generally, for SL(2, R) 
where R is any commutative ring, see |CMS| ). 

We shall use this theorem in two different situations: for maps arising from formulas of type 
(JH), called two- variable maps, and for those arising from formulas of type ([5]), called three- variable 
maps. These situations will be described in the next two subsections respectively. 

3.1. Two-variable maps. In this section we focus on the underlying affine algebraic variety of 
the algebraic group G. Consider a morphism (p: G x G — > G satisfying the property (needed for 
descending to G = PSL{2)): 

<p(±x,±y) = ±ip(x,y). 
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For example, any word map provides such a morphism. Namely, for any x,y £ G denote s = tr(x), 
t = tr(y), and u = ti(xy), and define a morphism ir: G x G — > ut by 

n{x,y) := (s,u,t). 

Then in view of Theorem 13.11 there exists a map ip : u t — ► A^ u t such that 

ip{ir(x, y)) = n(cp(x, y),y). (7) 

This map is called a "trace map" and is widely used (see, e.g., |Pe2j ). 

Define (p = (if, id): G x G — > G x G by <p(x,y) = (ip(x,y),y). Then the following diagram 
commutes: 

GxG — GxG 

(8) 

A 3 ^ , A3 

Here^(s,u,i) := (/i(s, u, t), f 2 (s, u, t), t), where u, t) = ti(<p(x,y)), f 2 {s,u,t) = tv(cp(x,y)y). 
Lemma 3.2. For any word map tp(x,y) the variety 

$ : {/i («,«,*) = s,f 2 (s,u,t) = u} C A2 )Uft 
o/ /ixec? points of ip has positive dimension. 

Proof. Since the variety <& is defined by two equations in A^ ut , it is sufficient to show that it is not 
empty. But for any word uj(x,y) we have: u>(l, 1) = 1, thus ^(2,2,2) = (2,2,2), hence $ 7^ 0. □ 

Lemma 3.3. Let Q = (so,«o>*o) be a fixed point of ip defined over ¥ q . Let (x,y) £ tt^ 1 (Q). Then 
((p(x,y),y) € tt^ 1 (Q) as well. 

Proof. Indeed, ([7]) gives 7r((p(x,y),y) = ip(Q) = Q. □ 

Theorem 3.4. For every ¥ q -rational point Q = (sQ,UQ,to) 6 A^ ut the fibre H = ir^ 1 (Q) has an 
¥ q -rational point. 

Proof. We will look for an element of H among pairs of matrices of the form 

-1 so)'(c -o + to))' (9) 

To lie in H, the entries of these matrices must satisfy the equations 

a(—a + to) — be = 1, c — b + sq(— a + to) = uo- 

On eliminating b, we arrive at the following equation in a and c: 

a 2 + c 2 — soac — too + (so^o — u o)c +1 = 0, (10) 

which has a solution for every q. Of course, this can be proved using the Chevalley-Warning 
theorem, but for the reader's convenience we present here an elementary proof. 
Case 1. q is odd. 

The discriminant D of the quadratic part of the left-hand side of fjlOl) equals Sg — 4. If D = 0, 
i.e. so = ±2, we exhibit an explicit point in H: 

'±1 tio=Mo\ fl t -2 



±1 y ' vi t -i 



(ii) 



so we may assume D 7^ 0. First, by a linear change of variables over ¥ q , let us bring (|10p to the 
form 

~2 1 ~2 

a + ec = r. 
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If r is a square, r = v 2 , we can put a = v, c = 0, so we may assume that r is not a square. If e is 
not a square, then r/e is a square, r/e = t> 2 , and we can put 5 = 0, c = u, so we may assume e is a 
square, e = v 2 . In F g there are (g + l)/2 squares and (q — l)/2 nonsquares, thus among (q + l)/2 
elements r — a 2 , when a ranges over ¥ q , there is a square w 2 . We then put c = w/v. 
Case 2. g is even. 

If so = 0) then we get a point in H from (llip . so we may assume so 7^ 0. Then on putting 
a = a + (soto + ^o)/sO) c = c + to/so, we bring (fT0|) to the form 

a 2 + c 2 + sooc = r. 

As every element of F g is a square, we have r = v 2 and we can put a = v, c = 0. □ 

Corollary 3.5. Consider the following "conjugation" equivalence relation ~ on SX(2,F g ) 2 ; 

~ (x',y') ijJ3g G SL(2,F 9 ) | x = gxg~~ l , y' = gyg -1 . 

T/ien every absolutely irreducible component of the set of conjugacy classes of if -periodic points is 
positive dimensional. 

Proof. Indeed (SL(2,¥ q ) 2 \ V(¥ g ))/^ can be identified with F^. The corollary is valid, because the 
periodic set of the trace map is positive dimensional. □ 

We can now obtain a sufficient condition for the existence of periodic points. Consider the maps 
ip: G x G — > G and ip : A% ut — > A^ jU t as in diagram ([8]) , and denote by $ C A^ u t the variety of 

fixed points of ip. As in Section^ for a fixed y denote by ip y : G — > G the map x 1— > tp(x, y). 
Note that $ contains a line 

Li = {s = 2,u = t}. 

Since $ is a complete intersection, all its irreducible components have dimension at least one. 

k 

Theorem 3.6. Write = |J WjULi, where Wi are irreducible F ' q - components 0/$. Suppose q is 

i=l 

big enough. If at least one of Wi 's is absolutely irreducible, then there exists a pair (x,y) 6 G x G 
such that x ^ 1, y ^ 1 and x is a periodic point of (p y . 

Proof. Let Wi be an absolutely irreducible component of W, W ^ L\. By the Lang- Weil theorem 
[LW], there is a point Q = (so,uo,to) / (±2,i,±i) G Wj(F g ). According to Theorem 13.41 we 
have Hq(¥ q ) ^ 0, where Hq = tt^ 1 (Q). It follows that there exists a pair (x,y) G G x G such 
that so = tr(x), uq = tr(xy), to = t r (y)- By Lemma [3.3| (ip y (x),y) G HQ(¥ q ) as well. Since 

the set Hq(¥q) is finite, there are numbers n < m G N such that ip y m \x) = ip y n \x). Thus, 

x = ip y n \x) is a periodic point of tp y . Moreover, the image of x in G = PSL(2,q) is non-identity 
since Q = (so,UQ,to) ^ (±2,t,±t). □ 

Remark 3.7. If there is a component Wi C defined over Z and irreducible over Q, then, by |Gr|. 
Theorem IV, 9, 7.7(i)], the assumptions of the theorem are satisfied for any prime p big enough. 

Remark 3.8. Suppose q = p > 3 is a prime number. Note that all the maps in diagram ([8]) 
are defined over Z, and it can thus be viewed as the special fibre at p of the following diagram of 
morphisms of Z-schemes (denoted by the same letters) : 

Q x Q — p —+ g x g 

(12) 

A| > A| 

where g = SL(2,Z). 
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3.2. Three- variable maps. Let here G denote SL(2, K) where K is an arbitrary field. Consider 
a morphism <p : G x G x G —* G such that 

<p(±x, ±u, ±y) = ±tp(x, u, y). 



The modified map (p: GxGxG^GxGxG is defined by ip(x,u,y) = (x, tp(x,u,y),y). 

As above, we consider a representation p of the free group F 3 in SL(2, Z) and assume that 92 is 
defined by a word w = uu(x, u, y). The trace of p(w) can be expressed as a polynomial in 7 variables 
ai = tr(x), a 2 = tr(y), a 3 = tr(u), a 12 = ti(xy), ai 3 = tr(ra), a 23 = tr(yu), ai 23 = tr(xyu). These 
variables are dependent (see, e.g., |Malj or formulas (2.3)-(2.5) in [Ho]): 

a i23 - «i23(ai203 + ai3a 2 + a 23 ai - aia 2 o 3 ) 

(13) 

+ (a? + a 2 + o 3 + a? 2 + af 3 + a 23 - aia 2 a i2 - aia 3 a i3 - a 2 a 3 a 23 + ai 2 ai 3 o 23 - 4) = 0. 

Let a = (ai, a 2 , a 3 , ai 2 , ai 3 , a 23 , ai 23 ) G A 7 , let Z C A 7 be an absolutely irreducible set defined by 
(fT3"|) . Let n(x,u,y) = a £ Z be the trace projection. Then the following diagram is commutative: 



GxGxG — G x G x G 



Z(K) — Z(K) 



(14) 



where ^ (a) = (01, a 2 , /i(a), ai 2 , / 2 (a), Z 3 (a), /4(a)), 

il = tr(v?(x,u,y)), / 2 = tr(</?(x,u,y)x), 

l 3 = tr(<p(x, u, y)y), l A = tr(ip(x, u, y)xy). 
The variety F(ip) C Z of fixed points of ^ is defined by the equations 

h(a) = a 3 , l 2 {a) = a 13 , l 3 (a) = a 23 , / 4 (a) = a i23 , 

and, since it is nonempty, its dimension is at least 3. 
Let us now consider diagram (|14|) more carefully. 

Lemma 3.9. Let F be any algebraically closed field. Then the set Z is an irreducible hypersurface 
over F. 

Proof. Assume the contrary. Let p denote the natural projection of A 7 to A 6 , forgetting the 
coordinate ai 23 . Let L C A 6 be an irreducible curve not contained in the branch locus of the 
restriction of p to Z. Then the set p~ l {L) f] Z is reducible. 

Case 1. char(F) ^ 2. 

Let c 7^ ±2. Consider the curves L = {ai = a 2 = a± 3 = a 23 = 0, ai 2 = c} C A 6 and 
M = p _1 (L) = {ai = a 2 = ai 3 = a 23 = 0, a%2 = c} C A 7 . Then from (|13j) it follows that 
M' = Z f] M is defined by the following equations: 

(«123 - a 3 c/2) 2 - (c 2 - 4)(o| - 4)/4 = 0, ai = a 2 = a i3 = a 23 = 0, a i2 = c. 

Therefore M' is a branched double cover of L, hence it is irreducible. Contradiction. 

Case 2. char(F) = 2. We now consider the curve L = {a\ = a 2 = ai 3 = a 23 = 0, ai 2 = 
a 3 + 1} C A 6 . In the notation of Case 1, M' is defined by the equations 

a i23 - a 3(°3 + l)ai23 + 1 = 0, ai = a 2 = a i3 = a 23 = 0, a i2 = a 3 + 1. 

Thus it is irreducible. Contradiction. 

Hence Z is irreducible. □ 

Theorem 3.10. Let Z C hJ ai a2 a3 a23 ai23 be defined by equation (fT3|) . Then for all q the 

map ir: SL(2,q) x SL(2,q) x SL(2,q) — > Z(F 9 ) is surjective. 
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Proof. The result will follow from identities between certain polynomials in the polynomial ring 

R := Z[xi,X2,X 3 ,Xi2,Xi3,X23,Xi23,ai,Ji,a 2 , r Y2\- 

Denote 

L :=x 123 ~ ^123(^12X3 + X 13 X 2 + X 2 3 +Xi- X1X2X3) 



+ x\ + x\ + x\ + x\ 2 + x\ 3 + X23 - xix 2 xi2 - X1X3X13 - X2X3X23 + X12X13X23 - 4, 
L12 := x\ + x\ + x?2 - X1X2X12 - 4, L13 := x^ + x\ + xf 3 - X1X3X13 - 4, 



(15) 



£23 := x\ + X3 + X23 - X2X3X23 - 4 

(all viewed as elements of R) . 

We start with the following lemma (skipping an elementary proof). 

Lemma 3.11. Let K be a finite field, and let r, s, t, a 6 K be such that the equation in x, y 

x 2 + y 2 + rxy + sx + ty = a 

is not solvable in K. Then the characteristic of K is 2 and r = 0, s = t hold. □ 

We now define two more polynomials in the ring R (the reason will become clear later on): 

D 1 := -al + 0171x3 + a i x 1 - 7? - 71^1^3 + 71^13 - 1, 

D 2 := -a| + C1272X3 + «2X2 - 72 ~ 72X2X3 + 72X23 - 1- 
Our argument will also need the following two by two matrix over R: 

A = ( 2a 2 - 72x3 - x 2 -a 2 x 3 + 272 + x 2 x 3 - x 2 3 \ 

V "2X3 - 272 - X 2 X 3 + X 2 3 —OL 2 x\ + 2q 2 + 72X3 + X2X3 - X 2 - X3X23 / ' 

Define further A to be the adjoint matrix of A, that is A is A with the diagonal entries permuted 
and the off-diagonal entries multiplied by —1. The product A A is the scalar matrix corresponding 
to the determinant of A. We further consider the vector 



and define r, s £ R by 



b = - q 2 xi - 72x1x3 + 72x13 - XiX 2 + X12 \ r2 

' «2Xl3 - 72X1 - X 2 Xi 3 + 2723 



r ' Ah. 

s 



Multiply now D\ by L\\ and replace y\ := L| 3 ai, y 2 := L^ji, obtaining the polynomial 
F{yi,y 2 ) ■= -y\ + yi2/2x 3 + ^1^23^1 -y\- y2L 2 3Xix 3 + ^2^23^13 - £23 

in the variables y±, y2- 

We need one more lemma. 

Lemma 3.12. Let D2 be the ideal of R generated by D2 and D the ideal generated by D2 and L. 
Then the following hold: 

(i) det(A) - L 23 is in £2; 

(ii) F(r, s) is in D. 

The proof of this lemma amounts to certain simple computations which are best done using a 
computer algebra system. The first item follows for example from the identity: 

det(^)-L 2 3 = (x|-4) J D 2 . 
For the second item, the formula is more complicated. We skip the details. □ 

We can now go over to the proof of the theorem. 

Let K be any field. Let x = (xi, x 2 , X3, X12, X13, X23, X123) £ Z{K). As we are working with 
traces and are thus allowed to make simultaneous conjugation, we start our search of solutions to 
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tt(Bx, B2, -B3) = x by considering the following triples of two by two matrices over the polynomial 
ring K[ai, 71, 02,72]: 

B _ ( "1 -01^3 +71 + ^1^3 - K13 \ B = f OL 2 -0 2 X 3 + 72 + X 2 X 3 - X 2 3 

1 \ ai x\ — a\ J ' 2 V 72 x 2 - o 2 

(17) 

(18) 

The condition that Si, Z?2, -B3 have determinant 1 and satisfy ir(Bi, B2, -B3) = x is equivalent 
to the four equations: 

£>! = -aq + 0171X3 + aixi - 7? - 71X1X3 + 71X13 -1 = 0, (19) 

D 2 = -a\ + 0272X3 + o 2 x 2 - 7! - 72X 2 x 3 + 7 2 x 23 - 1 = 0, (20) 

oi(2o 2 - 7 2 x 3 - x 2 ) + 7i(-a 2 x 3 + 27 2 + x 2 x 3 - X23) 

- Q 2 Xl + 72x1x3 - 72x13 + XlX 2 - X12 = 0, 

01(02x3 - 272 - x 2 x 3 + x 23 ) + 7i(-«2x| + 2a 2 + 72x3 + X2X3 - x 2 - X3X23) ^ 

- a 2 xi 3 + 72X1 + X2X13 - X123 = 0. 

Notice that the first equation is quadratic in ai, 71 only and the second is quadratic in Q2, 72 only. 
The third and fourth equations are written as a linear system in 0:1,71. Defining the vectors 

v . = ( a i\ b-= ( ° 2Xl ~ 72X1X3 + 72X13 ~~ XlX2 + Xl2 
V 71 / ' V a2Xl3 ~ 72X1 ~ X2Xl3 + Xl23 

the third and fourth of the above equations can be schematically written as 

Ay = b 

with the matrix A defined in (|16p evaluated at our point x. 

We now assume that K is a finite field. We shall now write L23(x) for the polynomial L23 defined 
above evaluated at our point x G Z(K), that is L23(x) = x\ + x 2 + x 2 3 — X2X3X23 — 4. We use a 
similar notation for all the other polynomials. 

Case 1: At least one of the values Li2(x), Li3(x), ^23(x) is nonzero. Assume, say, 
-^23 (x) 7^ (the other cases are similar). 

First we show that (i20j) . viewed as an equation in the indeterminates 02, 72, has a solution. 
Assume the contrary. Then by Lemma 13.111 we conclude that the characteristic of K is two, X3 = 
and X2 = X23. This contradicts the assumption L23 7^ 0. 

We shall now fix a solution (02,72) £ K 2 of equation (|20f) and put these into the above matrix 
A getting a two by two matrix over K. Similarly we get a vector b in K 2 . By Lemma 13.121 we find 

det(A) = L 23 (x) + 

which is guaranteed by our assumption. We now define (01,71) G K 2 by 

ai ) := A~ x b. 
71 / 

By Lemma f3. 12( h). we have found three matrices B\, B2, B3 £ SL(2, K) satisfying ir(Bi,B2, B3) = 
x. 

If now L,23(x) = 0, we have either Li 2 (x) 7^ or Li3(x) 7^ 0. These cases are treated in a similar 
way. □ 

Remark 3.13. The above proof remains true if K is any quadratically closed field (cf. also [Pel] ). 
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Case 2: L 12 (x) = Li 3 (x) = L 23 (x) = 0. 

Loosely speaking, our strategy in this case is to use automorphisms of the free group F3 to get 
from x another point of Z{K) such that not all three values of vanish at that point, and then 
use the result of Case 1. Let us make this more precise. 

We start with an obvious lemma. 

Lemma 3.14. Let n>2, let F n denote the free group on n generators X%,. . . , X n , and let G n be 
the product of n copies of a group G. The map 

Aut(F n ) - Sym(C7 n ), tp » 0, 

defined by 

<p(T) = ( ( p(X 1 ) T ,...,<p(X n ) T ), 

is a group homomorphism. 

Here T is an n-tuple of elements of G and <p[X{)t is the element of G obtained by substitution of 
the elements ofT instead of the X{ 's appearing in the expression of<p(Xi) in the basis {X\, . . . , X n }. 

□ 

The following constructions are described in |Hoj (see also [Malj . |Pe2j ). sometimes with details 
omitted. For the reader's convenience and sake of completeness we now focus on the case n = 3 
giving some more details. Fix a basis {X, Y, Z} of F3. 

Definition 3.15. For every p £ Aut(F^) define a map A 7 — > A 7 by the formula 

F v (u) := (P^x) ( u ) i P tp(Y) («),-•• ,P<p(XYZ){u)), 
where P w is the integer polynomial in 7 variables corresponding to the word w (cf. Theorem 13. ID . 
Lemma 3.16. For every tp G Aut(i r 3) and every T G SL(2,K) 3 we have 

tt(p(T)) = Fy(n(T)). 

Proof Obvious. □ 
Lemma 3.17. For every p £ Aut(i 7 3) and every field K we have F V (Z(K)) C Z{K). 

Proof. We first prove that F V (Z(K)) C Z(K), where K is an algebraic closure of K. From this the 
needed inclusion will follow as soon as F v is defined over K. In Case 1 we have proven that the 
map 7r is surjective onto an open subset 

U(K) = {L 12 + 0, L 13 + 0, L 23 + 0} C Z(K), 

since the proof was valid for any algebraically closed field (see Remark I3.13P . 

Let u £ U(K),u = 7r(T),T £ SL(2,K) 3 . Then F v (u) = F^(n(T)) = ir(<p(T)) £ Z(K). Hence, 
Ftf,(U(Ky) C Z(K). Since U is open in Z and Z is irreducible, the same inclusion is valid for Z. 
Since F v is defined over Z, the inclusion for AT-points follows as well. □ 

Lemma 3.18. (i) F id = id; 

(ii) For every p, if) £ Aut(F^) and every u £ Z(K) we have 

F^iu) = F^o F^{u). 

Proof. The first item is obvious, so let us prove the second one. Once again, similarly to Lemma[37T71 
it is sufficient to prove it over an open subset U considered in Lemma[37T71 and over the algebraically 
closed field K). 

Let us take u £ U(K),u = ir(T),T £ SL(2, A) 3 . Using Lemmas EH and EH we get 

F^iu) = n(p o ip(T)) = tt{<p o tp(T)), 

Pip o F^u) = F v {n${T)) = 7r(p(ip(T))), 
so the needed equality is proved. □ 
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Corollary 3.19. The correspondence tp \—* defines a group homomorphism KvX{F^) —* Aut(Z) 
where Aut(Z) is the group of Z- defined polynomial automorphisms of the variety Z. □ 

We can now go over to the proof of the theorem in Case 2. 

Let, as above, x S Z(K) be such that Li2(x) = L\^{x) = L23(x) = 0. 

Case 2a. Let first assume that there exists ip G Aut(i 7 3) such that u := F^{x) is such that 
not all three values L\2{u), L\^{u), L2z(u) are zero. By Case 1, there exists T 6 SL(2,K) 3 such 
that 7r(T) = u. Define T' := <£ -1 (T). By Lemma EH] and Corollary EH1 we have 7r(T') = 
Fp-i (vr(T)) = i^-i(tt) = F~ (u) = x, and we are done. 

Case 2b. Assume that there is no such ip as in Case 2a. 

Denote by Lf- (where i,j stand for distinct numbers from the set {1,2,3}) the polynomials in 
7 variables obtained after applying F v to Ly. The needed contradiction immediately follows from 
the following proposition. 

Proposition 3.20. Denote the automorphisms of F3 sending the basis {X, Y, Z} to the bases 
{XY,Y,Z}, {X,YZ,Z}, {X,Y,XZ}, {XY-\Y,Z}, {X,Y,YZ}, {XY 2 ,Y,Z}, {X,ZYZ~\Z}, 
{X, Y, XZX^ 1 }, by ipi, . . . ,ip$, respectively. Denote by a the ideal in Z[x%, . . . , X123] generated 
by the functions Lf™ where, as above, i,j stand for distinct numbers from the set {1,2,3}, and 



k = 1, . . . , 8, and let 



Z a (K) = {xe A 7 (K) : f(x) = for all / € a}. 
Then for any field K of characteristic different from 2 we have 

Z a (K) ={(2, 2, 2, 2, 2, 2, 2), (0, -2, -2, 0, 0, 2, 0), (0, -2, 2, 0, 0, -2, 0), (0, 2, -2, 0, 0, -2, 0), 
(0, 2, 2, 0, 0, 2, 0), (0, 0, 0, -2, -2, -2, 0), (0, 0, 0, -2, 2, 2, 0), (0, 0, 0, 2, -2, 2, 0), 
(0,0,0,2,2,-2,0)}, 

and for any field of characteristic 2 we have Z a (K) = {(0, 0, 0, 0, 0, 0, 0), (1, 0, 0, 1, 1, 0, 1)}. 

Proof. MAGMA computation. □ 

For each of the points x appearing in Proposition 13.201 one can easily exhibit an explicit triple 
of matrices T such that vr(T) = x. Say, vr(Id, Id, Id) = (2, 2, 2, 2, 2, 2, 2), 

"((! VMV -0-Co 1 -OH-. - 2 >°.^°>> 

and so on. 

Theorem 13.101 is proved. □ 

Coming back to the map ip, let us consider an additional condition: 

u = w(x,y), (23) 

where x e G,y £ G and w & F 2 . Let 53(01, «2, 012) = tr(w(x, y)), 513(01,02,012) = tv(w(x,y)x), 
523(01,02,012) = tr(w(x,y)y), 5123(01,02,012) = ti(w(x,y)xy). Then (|23|) defines a three-dimensional 
variety W(«;) C Z: 

a 3 = 53(01,02,012), 
ai3 = 513(01,02,012), 
023 = 523(oi,o 2 ,ai 2 ), 

, O123 = 5l23(oi, 02, 012) 

We can now formulate a result which treats the SL(2, g)-case for three-variable maps and thus 
makes a crucial step towards getting a sufficient condition for a given sequence of type ([5|) to 
characterize finite solvable groups. 



W(w) = Zf] < 



(24) 



GEOMETRY AND ARITHMETIC OF VERBAL DYNAMICAL SYSTEMS ON SIMPLE GROUPS 



15 



Theorem 3.21. Let v(x, u, y) and w(x, y) be words in the free groups with three and two generators, 
respectively. Define a sequence u n (x,y) by the following recurrence relations: 

uo{x, y) = w(x, y), u n+1 (x, y) = v(x, u n (x, y), y). 

Let (p: G x G x G — > G be the map defined by (x,u,y) t— ► v(x,u,y), let F(<p) be the variety of 
fixed points of the trace map ip induced by cp (see diagram (| 1J$ ), and let W(w) be defined by (|24j) . 
With the notation of Theorem V3.HK let V = {a2 = 2, a\ = a±2, = a23, ai3 = 0123}- 

Assume that F{ip) |~| W(w) contains a positive dimensional, absolutely irreducible Q-subvariety 
$ such that $' := $ \ ($ p V) is an open subset of <£. 

Then there is qo such that for every q > qo there exists a pair (x,y) G G x G with u n (x,y) ^ 1 
for all n G N. 

Proof. Let q be such that $'(F ? ) / 0. Let a G $'(F g ). By Theorem [3. 1UI there is a triple (x, u, y) G 
G x G x G such that ir(x,u,y) = a. Moreover, since a G W(w), we may take u = w(x,y). Since 
a G we have ip(a) = a, hence ir(x, u\(x, y),y) = a. Similarly, n(x, u n (x, y),y) = a for all n G N. 
Since 02 = tru n (x,y) ^ 2, we have u n (x,y) ^ 1. □ 

Remark 3.22. Although this section was completely devoted to considering the group SL{2) (until 
now PSL(2) only appeared in its title), the obtained results (in particular, Theorems 13.61 and 13.21 j) 
are also applicable to the PSX(2)-case. (In the two-variable case, this is explicitly explained at the 
end of the proof of Theorem 13.61 the case of Theorem 13.211 is similar). 



4. Case G = Sz(q) 



Sz(q), q = 2 2m+ \ 
> ip{x, y). There is 
which simplifies 



In this section we consider a map ip: G x G — » G where G is a Suzuki group, 
rn > 1. As above, for a fixed y G G we denote by ip y : G — > G the map (x, y) h 
no trace map in this case. Nevertheless there is a factorization (see diagram ([27 
the picture. This leads to a sufficient condition (Theorem 14. 3p for the existence of periodic points. 
Although the condition is not that simple, we have an example in Subsection 15.11 when it works. 

Recall that according to the Bruhat decomposition, G = XJ\ U U2, where the first Bruhat cell 
U\ = B consists of all lower-triangular matrices of the form x = T(a, b)D(k) with 



a 

a 1+s + b 
i 2+s + ab + b s 



T(a,b) 



D(k) 



and the second Bruhat cell Uo consists of the matrices 






V 














\ 





k s/2 
















k- s l 2 







V 








k- s / 2 ' 


V 



x = T(a,b)D(k)wT(c,d), 



where 



w 



/o 




V 



Here a,b G ¥ q , k G ¥*, 



im+1 



Recall the following properties of these matrices: 
(i) r(0,l)T(o,6)=T(o,6)T(0,l); 



1\ 







(25) 
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(ii) D(k)w = wDik- 1 ); 

(iii) T(a, b)T(c, d) = T(a + b,ac s + b + d); 

(iv) wT(0,t)w = Tit 1 ' 3 ,t- 1 )D(t 2s / ( - s+2 y)wT(t 1 ' s ,0); 

(v) T^ir 1 =T(0,1); 

(vi) D{k)- l T{a,b)D{k) = T{ak,bk 1+S ). 

For x = T(a, b)D(k)wT(c, d) e £7 2 define 

x' = x{x) = T(c, d)xT(c, d)' 1 = T(c, d)T(a, b)D(k)w = T(a + c,ca s + b + d)D(k)w. 
Note that for any z = T(a, (3) we have 

x{zxz~ l ) = x{T{a, l3)T(a,b)D(k)wT(c,d)T{a, /3)- 1 ) 

= T(c, d)T(a, P)~ l T{a, /3)T(a, b)D{k)w = T(c, d)T{a, b)D(k)w = 
Lemma 4.1. If for any y,x,h £ G we have 

W y (hxh~ x ) = hip hyh -i(x)h~ 1 , (26) 

then for y = T(0, t) we have 

<Pv(x(x)) = X(<p y (x)). 

Proof. For z = T(c, d) we have 

(p y {zxz~ x ) = Zip z -Xy Z {x)Z~ X . 
Since the matrices T(0, t) commute with any z, it follows that 

(Py(zXZ^ 1 ) = Z(fy(x)z~ 1 , 

i.e. 

(fy(x(x)) = X(z(p y {x)z- 1 ) = X((p y (x)). 

□ 

From now on until the end of this section we only consider elements x from the second Bruhat 
cell. 

Corollary 4.2. For x £ U2 denote tv\(x) = a+c, w 2 ( x ) = ca s + b+d, k{x) = k. Then for y = T(0,t) 
there exist functions f,g and h such that if <p y (x) 7^ 1 then 

■Ki(ip y {x)) = f(TT 1 (x),7r 2 (x),k(x)), 

K2{<Py(x)) = g(ni(x),TT 2 (x),k(x)), 
k((f y (x)) = h(ir 1 (x),ir 2 (x),k(x)). 

Proof. Indeed, by construction x(x) = T(TTi(x),iT2(x))D(k(x))w. Thus by Lemma 14.11 we have 

T(TT 1 (<Py(x)),Tr 2 {(py(x))D(k(tpy(x))w = >c((p y (x)) = <p y (x(x)) = <py(T(ir 1 (x),Tr 2 (x))D(k(x))w). 

It follows that Tri((py(x)),TT2(<p y (x)) and k(ip y (x)) are determined uniquely by the values of iri(x), 
TT2(x) and k(x). □ 

Corollary 14.21 may be expressed by the following commutative diagram of F 9 -morphisms: 



A L x A; x A» D U A* x A* x A? , 



A^, 6 x A* -<U Al b x A* 



(27) 



where U denotes the set of x G U2 such that (f y (x) 7^ 1. 

This corollary provides the following sufficient condition for the existence of periodic points which 
can be viewed as an analogue of Theorem 13. 61 
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Theorem 4.3. Let G = Sz(q), let y = T(0, 1) G G, and suppose that the map ip y satisfies the 
following conditions: 

• equality (|26|) holds for any x,y,h G G; 

• i/ie morphism ip: A^x A^-tA^xA^ induced by (p y (see diagram i \27\ ) ) has an invariant 
set V (i.e. ip(V) CV). 

Then the map (p y : G — > G has a non-identity periodic point. 

Proof. Indeed, the cell 17% does not contain the identity matrix. □ 
Remark 4.4. In view of (|26|) . the statement of Theorem 14.31 holds for any y = T(0,t). 

5. Examples 

In this section we want to demonstrate how the trace map works. In Subsection 15 . 1 1 we consider 
the two-variable case and give a new proof of the main theorem of [BWWJ characterizing finite 
solvable groups. In Subsection 15.21 we compute the trace map for the three- variable sequence 
from [BGGKPPlJ, [BG GKPP2] (that also characterizes finite solvable groups). In Subsection 15.31 
we apply our method for finding a modified sequence having the same property. Subsection 15.41 
contains an illustration of the method for a simple case where the word under consideration is 
commutator. 

5.1. The sequence of Bray— Wilson— Wilson. The sequence s n (x,y) of [BWW] is defined as 
follows: 

si = x, s 2 = [y~ X xy, x~\ ...,s n = [y~ x s n -iy, s~ x {\, 
Recall the main result of [BWWJ. 

Theorem 5.1. (IB WW],) A finite group G is solvable if and only if 

(3 n G N) (V(x,y) G G x G) s n (x,y) = 1. 

The proof reduces to the following: 

Theorem 5.2. flBWWj .) Let G = PSL(2,¥ q ), q>3, or G = Sz(2 2m+1 ). Then there exists a pair 
(x,y) G G x G such that s n (x, y) ^ 1 for all n G N. 

We want to give another proof of Theorem 15.21 using the trace map and other geometric consid- 
erations. 

For technical reasons we will change notation and consider a sequence e n (x,y) which differs 
from s n (x,y) only by replacing y with Since in [BWW] the element y was supposed to be an 
involution, this does not matter. We define 

ei = x, e 2 = [yxy~ x ,x~ x ], . . . , e n = [ye n -iy~ l , e~ x x ], 

i.e. in this example 

<p(x,y) = <p y (x) = 

(see Section [3]). 

Case of PSL As explained in Remark 13.221 we can freely apply the results of Subsection 13.11 
obtained for G = SL(2,q) to the case G = PSL(2,q). 

We are going to compute the variety $ of fixed points of the corresponding trace map ip : A 3 — > A 3 
(see diagram ([8])). We maintain the notation of Subsection 13. 11 In particular, we denote s = tr(x), 
u = tr(xy), t = ti(y), and r = u 2 + s 2 + t 2 — ust. Then (see [GMSj Lemma 5.2.4]), 

fi(s,u,t) = 2s 2 + {ti{yxy- x x- x )) 2 - s 2 {tx{yxy- x x- x )) - 2, 
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Direct computations give 

fl(s, u, t) = 2s 2 + {r- 2) 2 - s 2 (r - 2) - 2 = s 2 (4 - r) + r 2 - 4r + 2 = 

f 2 (s,u,t) = fi(s,u,t) ■ t + s(st - u){r - 4) - t(r 
The variety $ C A is now denned by the following system: 

3 =( r - 4)(r - s 2 ) + 2, 



(r — 4)(r 
3). 



s 2 ) + 2, (28) 
(29) 



$ = ( u =st + s(*t - u){r - 4) - t(r - 3), V (30) 

r =u 2 + i 2 + s 2 — ust. 

This curve contains a trivial component L]_: 

s = 2, r = 4, u = t. 

To eliminate this component, we consider a curve $ in the space A 5 with coordinates (s,u,t,r, z) 
which is isomorphic to $ \ L\: 



u 2 + t 2 + s 2 



ust, 



(r-4)(r-s 2 )+2, 



s 

u = st + s(st — u)(r — 4) — t(r — 3), 
z(r - 4) = 1. 



(31) 



Lemma 5.3. T/ie plane curve A C A 2 given by the equation (s — 2) = (r — 4)(r — s 2 ) is a smooth 
irreducible genus 1 curve with two punctures. 

Proof. Assume the ground field is algebraically closed. Let A be the closure of A in the projective 
space. One can check that A has no singular points. 

As a plane smooth curve, A is irreducible. Moreover, it is a double cover of P 1 and by Hurwitz's 
formula has genus 1. □ 

Magma computations show that the curve $ has two components: 



z + t + s = 0, 
u — t — s + r — 1 = 0, 
ts - 2t - 2s + r = 0, 
tr - it + sr - 4s + 1 = 



2 

s r 



4s + s — r 2 + 4r 



0. 



(32) 



Wo 



z-t + s = 0, 

u — t + s — r + 1 = 0, 

ts - 2t + 2s - r = 0, 

tr - it - sr + 4s - 1 = 0, 

s 2 r — As 2 + s — r 2 + 4r — 2 



0. 



(33) 



both defined over the ground field and isomorphic to A\{r = 4, s = 2}, i.e. to a genus 1 irreducible 
curve with 3 punctures. Therefore both W\ and W<i are absolutely irreducible. 

From Theorem 13.61 it follows that if q is big enough, then there exists a pair (x, y) G PSL(2, q) x 
PSL(2,q) such that x is a periodic point of the map c^y. 

Remark 5.4. Since Wi, W 2 are curves of genus 1 with 3 punctures, they contain Fg-points for all 
q > 7. Since each fibre contains a rational curve with at most two punctures, q "big enough" means 
q > 7 in this example. Small fields have been handled in a straightforward manner. 
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Case of Sz(2 n ) 

We keep the notation of Section 0J We have to show that the map <p y meets all the conditions 
of Theorem 14.31 Condition (|26)) is obviously satisfied. Let us find an invariant set V of the map ip 
(see diagram ([27)) ). A direct computation of /(0, 6, k), g(0, b, k) and h(0, b, k) for x = T(0, b)D(k)w 
and y = T(0, 1) gives 

n 2a „ 2s (l + s)2s 2s 

k(0, b, k) = k 2 (5^ = k 2 (b + • k~^~ = k 4 (b + 1)=+*, 
f(0,b,k) = 0, 

s(o, b, k) = ( ( a 1 - s fc- 1 ) 1+s + (/? + i/(5)k-^ 

= k-^ip 1 - 3 " + (3 + = k- (1+s ^(3 = 6 + 1. 

Thus for 6 7^ 0, 1 the function g has period 2. 
After the second iteration, we get 

/(/(0, 6, k),g(0, b, k), h(0, b, k)) = 0, 

g(f(0,b,k),g(0,b,k),h(0,b,k)) =b, 

h(f(0, 6, fc), 5 (0, 6, fe), fc(0, 6, fe)) = k w (b +1)^6^. 

Therefore, the set V = {x £ U2 ■ tti(x) = 0, iT2(x) = 6 / 0, 1} is invariant under the second 
iteration of ip y and does not contain 1. 
Theorem 15.21 is proved. 

5.2. Three-variable sequence. In this subsection we consider another sequence characterizing 
solvable groups which was introduced in [BGGKPPl] . [BGGKPP2] : 

uq = x~ 2 y~ 1 x, . . . , u n+1 = [xu n x~ l . yuny' 1 ], . . . 
In the notation of Subsection 13.21 we have 

v(x,u,y) = [xux -1 , yuy^ 1 ], w(x,y) = x~ 2 y~ 1 x, 

and o stands for the point a = (a±, a<2, 03, 012, 013,023, 0123) G A 7 - 
We need some additional notation: 

0213 = tr(yxu) = 01203 + ai 3 a 2 + 02301 - aia 2 a 3 , 



612 = tr(x 1 y) = aia 2 - 


012, 


613 = ti{x~ l u) = 0103 — 


013, 


023 = tr(y -1 ii) = 0203 - 


023, 


6123 = tr(x -1 yu) = aio 2 3 - 


" O123, 


6213 = tr(y _1 xu) = a 2 ai3 - 


" O213, 


C12 = tr(xy 2 ) = 01202 - 


ai, 


c m i2 = tr(x"V ) = 6i 2 a 2 


- ai, 


di2 = tr(x 2 y) = ai 2 ai - 


02, 


0V12 = tr(x~ 2 y) = 6i 2 ai 


- «2, 


512 = tr(xu 2 ) = 01303 - 


Ol, 


/m23 = tr(u 2 y _1 ) = 62303 


- «2, 


pi = tr (ux^yuy^x) = 036126123 - 


6 2 -6 2 

°12 "123 



P2 = 623P1 - 6i3{a 3 6 2 i3 - 612} + 016213 - 623, 

P3 = 6l2(a2Pl - 6136213 + dml2) - 6213023 + C m 12, 

Pa = b\ 2 + a| + 6 2 23 - 612036123 - 2, 
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P5 = bl 2 + ai + b li3 ~ bi 2 a 3 b 213 - 2, 
h (a) = 2a\ + p\ — p\a\ — 2, 
l 2 (a) = aih- b 213 p 2 +P3, 

/ 3 (5) = b 2 V3,(bi 3 p 1 - (b 123 f m23 ~ h 2 b 23 + &I3))- 
- &12(piOl - &123&23 + C m l 2 ) + 0136123 - d m u. 

A direct computation shows that 

tr([xux" 1 ,yny -1 ]) = h(a), (34) 
tr([xux~ , yuy~ 1 ]x) = l 2 (a), (35) 

tr([xux~ 1 ,yuy~ 1 ]y) = l 3 (a). (36) 
In the following paragraph we compute 

tr([xux~ , yuy~~ \xy) = U(a) : 

Y = b 13 b 2 i 3 -d ml2 , P6 = &? 2 + a 3 + & 123- & 12«3&123-2, G = b 2 i 3 b 12 a 3 ~b\ 2 ~ b 213 + 2 > = a 2 G-Y, 
V = b 213 a 23 -c ml2 , E = b 12 U-V, Q = b 2 i 3 ai~b 23l R = a 3 b 2l3 -b X2 , H = b 13 R-Q, D = b 23 G-H, 
B = b 123 D -E,C = b l2 (p 6 - 1), A = a 2 B -C,l 4 = a l2 h - A. 

Furthermore, 

tr(ito) = tr(x _2 y _1 x) = tr(x _1 y _1 ) = a± 2 , 
ti(uox) = tr(x~ 2 y~ 1 x 2 ) = tr(y) = a 2 , 
tr(u y) = tx{x~ 2 y~ 1 xy) = tr(sc) tr([x, y\) - tr(y _1 a;y) = ai(a 2 + a| + a 2 2 - a\a 2 a\ 2 - 3), 

tr(u xy) = tr(x~ 2 y~ 1 x 2 y) = tr([x 2 , y\) = (a\ - 2) 2 + a 2 , + d\ 2 - {a\ - 2)a 2 d\ 2 - 2. 

Therefore the variety C = $ f] W(w) is defined by equation (fT3|) and the following system of 
equations: 

h(a) = a 3 , (37) 

l 2 (a) = ai 3 , (38) 

l 3 (a) = a 23 , (39) 

k(a) = a 123 , (40) 

a 3 = ai2, (41) 

ai3 = 02, (42) 

a23 = ai(a? + al + a 2 2 - 0102012 - 3), (43) 

ai23 = (ai - 2) 2 + + d 2 2 - (oi - 2)a 2 di 2 - 2. (44) 

Magma computations show that C contains two components, C\ and Ci corresponds to the 
trivial solution uq = 1, x = y^ 1 , and <3? is an irreducible curve intersecting the set V (see Theorem 
13.211 at a finite number of points (at most 31 as MAGMA computations give). Moreover, this curve 
is a projection of the solution of the equation uq = u\ computed in [BGGKPP2J. 
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5.3. A new sequence. In this subsection we produce a new sequence characterizing finite solvable 
groups. It is a modification of the sequence e n considered in Subsection 15.11 We keep the notation 
of that subsection. 

Let 9 n (x,y) = s n (x,y 2 ). Denote 9(x,y) = (p(x,y 2 ), i.e. 

Theorem 5.5. The map 6(x,y): SL(2,q) — ► SL(2,q) has nontrivial periodic points for all q. 

Proof. For a pair (x,y) G SL(2,q), let 

s = tr(x), t\ = tr(y), U\ = tv(xy), t = tr(y 2 ) = t 1 — 2, u = tr(xy 2 ) = U\t\ — s. 

Consider the following maps: 

x : A s,«i,ii — > A s,«,t> ^0, ui,h) = (s, uxt x - s,t\-2); 

^ : A s,«,t — ► A s,«,t> ip(s,u,t) = (fi(s,u,t),f 2 {s,u,t),t), 
where the functions f\ and fi are defined in ([28]) and (j29j) . respectively; 

ij;e(s,ui,tx) = (tve y (x),tr(e y (x) ■ y),try). 
We obtain the following commutative diagram: 

5L(2) x 5L(2) 5L(2) x 5L(2) 



AU KuuH ( 45 ) 



A 3 ^ , A3 

As shown above, the variety $ of fixed points of ip has three irreducible F g -components Li, Wi, 
W2, all absolutely irreducible for any q. 

Lemma 5.6. The curve Z2 '■= x~ 1 (W2) is absolutely irreducible. 

Proof. Consider the curve B defined in P 3 with homogeneous coordinates (s : f : t : w) by the 
equations: 

si - 2tw + 2sw -rw = 0, (46) 

if - Atw - sf + Asw -iv 2 = 0, (47) 

(s - 2w)w 2 = (fw - s 2 )(f - Aw). (48) 

Since equations (I33p are linear in u and z, the curve B is isomorphic (or at least birational and 
one-to-one) to the projective closure of W<z- 

The curve CcP 4 , isomorphic (or at least birational and one-to-one) to the closure of Z2, can 
be defined in P 4 with coordinates (i\ : s : f : i : w) by the same system (|4"6"j) . (|47p . (|48p. together 
with the additional equation 

il = w(t + 2w). (49) 

The projection r: C — > B, 

r(ti : s : f : t : w) = (s : f : t : w), 

is a morphism which represents C as a ramified double cover of B (this can be checked by a direct 
computation). Since B is absolutely irreducible, so is C. □ 
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From diagram (I45p it follows that at least the second iteration of ipg has a nontrivial absolutely 
irreducible component in the variety of its fixed points. Formula (|49p shows that C is a double 
cover of B with at most three ramification points (all at infinity). It follows that the genus is at 
most 2. Since B has 3 punctures and over at least one of them C is ramified, C has at most 5 
punctures. Therefore for q > 13 there are points in Z 2 rational over ¥ q . 

The case q < 13 was checked by straightforward computations. □ 

Corollary 5.7. A finite group G is solvable if and only if 

(3n G N) (V(x,y) G G x G) 0„(x,y) = 1. 

Proof. We argue as in the proof of Theorem 15. II Theorem 15 . 51 settles the PSL(2, q) case. In the case 
Sz{2 n ) no new proof is needed because T(0, 1) = T(l, l) 2 . Periodic points of cp y with y = T(0, 1) 
are periodic points of 6 yi with y\ = T(l, 1). The case G = PSL(3,3) is straightforward: for the 
matrices 
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we have si(x, y) = S4(x, y). □ 

Remark 5.8. The proof of [BWW] does not work for the sequence from Theorem 15. 71 It is proved 
in |BWWj that for 

'0 -r 

1 



yo 



there exists a periodic point of (p yo in SL(2,q) for every q. But yo 7^ z 2 in SL(2,q) if 2 is not a 
square in F ? . 

Remark 5.9. We believe that the statement of Theorem 15.71 remains true if one takes y n , with 
any n > 2, instead of y 2 (at least for even n) but this requires more subtle analysis. 

5.4. Commutator. In the following example we want to show how useful the trace method can 
be. We present a very simple proof of the following statement (which is a very special case of a 
theorem of Borel |Bo| , see also |Laj ) : 

Example 5.10. Let G = SL(2,q). Then the map F: G x G —* G defined by F(x,y) = [x,y] is a 
dominant morphism of the underlying algebraic F g -varieties. 

Proof. In the notation of Subsection 13 .1\ consider the corresponding map ip : u t — > A 3 : if tr(x) = 
s,tr(y) = t,ti(xy) = u, then 

ip(s,u,t) = (f 1 (s,u,t),f 2 (s,u,t),t). 

Here fi(s,u,t) =tr(F(x,y)) = s 2 + t 2 + v? - ust - 2, f 2 (s,u,t) = t. 

Let z G G, and suppose that a = tr(z) 7^ ±2. We want to show that there exist x,y G G with 
[x,y] = z. 

For any t G F g consider the inverse image r aj4jt := ij)~ l (a,t,t) <Z A? sut . We have 
r a ,t,t = {(s, u, t) G A 3 : s 2 + t 2 + u 2 - ust - 2 - a = 0}. 

For a fixed value to 7^ ±2, this is a quadratic equation in (s, u) which has a solution (so, uq) over 
every finite field (cf. the proof of Theorem I3.4|) . Thus we have a point Q := (so,uo,io) G r aji0jio . 

By Theorem[331 7r -1 (Q) / 0, so take (x,y) G tt _1 (Q). We have tr(F(x,y)) = a = tr(z). If a / 
±2 (i.e. z is semisimple), F(x,y) is conjugate to 2, i.e. [x,y] = wzw~ l . We get [i£; -1 :eu;, w~ 1 yw] = 
z, as required. □ 
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The map F: G x G — > G provides a dynamical system on SL(2,q) x SL(2,q) with 4>(x,y) = 
([x, y],y)- It corresponds to the Engel sequence e\ = [x, y],. ■ ■ , e n+ \ = [e n , y], . . . 

Let us show that this dynamical system has nontrivial periodic points for every q. The cases 
q = 2, 3 are treated by a direct computation, so assume q > 3. In view of Theorem 13,41 it is 
sufficient to find a fixed point of the trace map 

i/)(s, u, t) = (s 2 + t 2 + u 2 - ust - 2, t, t) 

with s 2 / 4, t 2 / 4. The point (s,t,t) is fixed if s = s 2 + 2t 2 - st 2 - 2.1f q = 2 n , then any pair 
(s = 1 + t 2 ,t) is a needed solution of this equation. If q ^ 2™, then for a fixed t we get si = 2 
(forbidden), $2 = t 2 — 1. Thus, any pair (t 2 — 1, t), t 2 / —1,3,4 provides a needed fixed point. 

6. Possible generalizations 

Here we present some more general problems arising from concrete calculations of the preceding 
sections. In Subsection l6.1l we consider AG systems introduced in Section [1] making this notion more 
precise. In particular, we want to distinguish between the cases when the underlying geometric 
object is defined over a global field or its ring of integers. We define residually periodic dynamical 
systems, propose some relevant conjectures and give several examples. In Subsection 16 . 21 we discuss 
in more detail verbal dynamical systems defined in the introduction. By combining the notions of 
AG dynamical system and verbal dynamical system, we define systems carrying both structures. 

6.1. Residually periodic dynamical systems. We start with AG dynamical systems. 
Let K be a global field, and let O stand for the ring of integers in K. 

Definition 6.1. A triple D = (X, V, ip) is called a .fT-dynamical system if 

• X is an algebraic -RT-variety; 

• cp : X — > X is a dominant ET-morphism; 

• V C X(K) is a 99-invariant subset. 

Definition 6.2. A triple T> = {X, V, <&) is called an O-dynamical system if 

• X is an O-scheme of finite type; 

• <3? : X — > X is a dominant O-morphism; 

• V C X(0) is a ^-invariant subset. 

We say that an O-dynamical system D = (X, V, <&) is an integral model of D = (X, V, ip) if 

• X x a K = X; 

• the restriction of $ to the generic fibre coincides with ip; 

• R(V) = V, where R : X — > X is the restriction to the generic fibre. 

Consider a i^-dynamical system D = (X, V, <p) and its integral model T> = (X, V, For a place 
p of K let 

• x p be the residue field of p; 

• X p the special fibre of X at p; 

• R p : X — > X p the reduction map (restriction to the special fibre) ; 

• pp \ Xp — * X p the reduction of $ viewed as a morphism of x p -schemes; 

• X p = Xp(xp) the set of rational points; 

• V p = R P {V) C X p the reduction of V. 

Assume that for all but finitely many places p the scheme X p is integral. One can deduce 
from |Gr|. 9.6.1(h)] that for all but finitely many p's the reduced morphism (p p is dominant. Let 
z S X p \ V p be a periodic point of <p p . Let l{z) be the number of distinct points in the orbit of z. 
Set tp := min{^(z)} where the minimum is taken over all z's as above. If there are no periodic 
points in X p \ V p , we set £ p = oo. Let M denote the collection of primes p such that £ p = oo. Let 

N = {lp}p£M- 
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Definition 6.3. With the above notation, we say that a K-dynamical system D = (X, V, tp) or an 
O-dynamical system T> = {X, V, $) is residually aperiodic if the set M is infinite, residually periodic 
if M is finite, and strongly residually periodic if the sets M and iV are both finite. 

For example, in Subsection 15.11 for a map ip: A| — > A| we had <Y = A 3 , x p = F p , V = 
{(±2, ±t, i)}, N = {1} and M = 0. 

We believe that the following special case is particularly interesting. Let V C X(0) be the set 
of all preperiodic integer points (i.e. points having a finite orbit). Let V p = R P (V) C X p be its 
reduction mod p. Residual periodicity of V = (X, V, $) means that tp p has periodic points outside 
V p for all but finitely many p's. In simple words, we are looking for periodic points of tp p not 
coming from preperiodic integer points of <I>. Note that according to [Si2j . cycles coming from a 
fixed nonperiodic integer point cannot be too short (their length, as a function of the cardinality 
of the residue field, tends to infinity). Thus our approach to studying cycles of reduced systems is, 
in a sense, complementary to |Si2j. 

As mentioned in the introduction, there may be different reasons for a dynamical system to be 
residually periodic. For higher-dimensional systems one can look for geometric conditions. The 
next notion captures the phenomenon of extra coordinates, or more generally invariant functions, 
as in Example 11.81 

Definition 6.4. We say that a dynamical system D = (X, V, tp) is of fibred type if there exists a 
regular function / on X such that / o tp^ = / for some iteration tp^ of tp. 

Question 6.5. Assume that a dynamical system D = (X,V,tp) is of fibred type. Assume that the 
endomorphism tp is not birational. Under what conditions on tp is D strongly residually periodic? 

Question 16.51 is essentially higher-dimensional. In one-dimensional situations the main role, of 
course, belongs to arithmetic. To get a better feeling of the problem, it is useful to consider 
one-dimensional examples which are, in a sense, opposite to Example 11.71 from the introduction. 

Example 6.6. Let T = G mt z = Spec(Z[x, y]/(xy — 1)) be the trivial one-dimensional torus. Fix 
a positive integer d, and let <3?: T — > T denote the power map: t — > t d . The set of integer points 
1Z = 7~(Z) consists of two points, 1 and —1, both fixed under <3? (i.e. periodic with period one). We 
choose the forbidden set V = 1Z. If d = 2, then £ p = oo for every Fermat prime p = 2 m + 1. Thus 
the system is residually periodic or aperiodic depending on whether there are finitely or infinitely 
many Fermat primes. Assume now that d is odd. 

Proposition 6.7. The dynamical system (T,1Z,$>) of Example 1 6. 6\ is residually periodic but is not 
strongly residually periodic. 

Proof. We have X p = ¥*, and for any t £ F* we have tp( n \t) = t d " . Assume (p,d) = 1. We are 
looking for t ^ ±1 such that 

t dn ~ l = \ (modp). (50) 

To find such a t with minimal possible n, let us first introduce some notation. For any prime I 
such that (d,£) = 1 denote by S£ the order of d in F|. Denote by Q(p) = {%} the set of all odd 
primes appearing in the prime decomposition of p — 1 and coprime to d. Set a(p) := min^gQ s q . If 
p = 1 (mod 4), we have i p < 2. We claim that for p = —1 (mod 4) we have £ p = a(p). Indeed, 
suppose that the minimum is achieved at some q £ Q, so d Sq — 1 = qm for some integer m. If g is 
a primitive element of F p , one can take t = g(P~ l }/i and n = s q to satisfy (I50p . On the other hand, 
if n < s q , then by the definition of s q we have n < sj> for all I £ Q, and hence for all such t we have 

d n £ 1 (mod I). 

The above also holds for all i dividing d, so we conclude that (d n — l,p — 1) = 2. If (f50l) holds for 
some t, then the order of t must divide both d n — 1 and p—1, hence it is equal to 2. Thus t = — 1 
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and belongs to the reduction of the forbidden set 1Z. We conclude that (I50p does not hold for any 
n < s q . This means that s„ = a(p) is the minimal possible length of the orbit of <p p , i.e. i v = a(p). 

To finish the proof of the proposition, it is enough to establish the following simple lemma (we 
thank Z. Rudnick for an elementary proof): 

Lemma 6.8. The set A = {a(p)}, where p runs over all prime numbers congruent to — 1 modulo 
4, is infinite. 

Proof of the Lemma. Assume the contrary: 

A = {s qi ,...,s qt }. (51) 
To get a contradiction, we wish to find p = — 1 (mod 4) with a{p) ^ A. 

First note that there are at most finitely primes q with a given value of s q , and denote by B the 
set of all q such that s q E A. It follows that B is finite. Thus we have to find a prime p such that 
p — 1 is not divisible by any q £ B. We want to find a prime number p satisfying the system of 
congruences 

x = — 1 (mod 4), 
x = — 1 (mod q) 

for all q E B. By the Chinese Remainder Theorem, the solutions of this system form an arithmetic 
progression. By Dirichlet's Prime Number Theorem, this progression contains infinitely many 
primes. If now p is such a prime, we have p ^ 1 (mod q) for any q E B. Thus the order of d in ¥* 
is not equal to any of s 9i 's, and so p ^ A, contradiction. 

This finishes the proof of the lemma and hence of Proposition 16.71 □ 

Example 6.9. Let now E be a CM elliptic curve defined over Q by the equation y 2 = x 3 — x, and 
let £ denote its minimal Weierstrass model. Let $ : £ — > £ be the multiplication-by-<i map (d stands 
for a positive odd integer). There are four 2-torsion points: (0,0), (1,0), (-1,0) and oo, all belonging 
to £(Z). Denote this collection by V. If p = —1 (mod 4), the reduction of E is supersingular, i.e. 
|-E(Fp)| = p + 1. We can now denote by b(p) the smallest prime factor of the number |i?(F p )|/4 
and by the argument similar to that of the previous example show that the set B = {b(p)}, where 
p runs over all p = — 1 (mod 4), is infinite. This leads to 

Proposition 6.10. The dynamical system V = (£, V, $) is residually periodic but is not strongly 
residually periodic. □ 

The interested reader is invited to complete the details of the proof as well as to develop more 
examples of arithmetical interest. 

To go beyond CM elliptic curves, one needs more efforts. A natural question to ask is the 
following one: 

Question 6.11. Let E be an elliptic curve over Q, and let D denote the order of its rational 
torsion. For each place p of good reduction, denote by c(p) the smallest prime divisor of the 
number \E(¥ p )\/D. Can the set C = {c(p)}, where p runs over all places of good reduction of E, 
be finite? Can the system (£, £(Q)tors, be strongly residually periodic? 

At the first glance, the conjectures by Lang-Trotter |LT] and Koblitz [Ko], predicting (for most 
elliptic curves) infinitely many p's with |i?(F p )| of prime order, give little hope to find an example of 
an elliptic curve such that the dynamical system defined by the multiplication-by-d map is strongly 
residually periodic. However, the following example (due to N. Jones) prevents from making hasty 
conclusions. Consider the curve Eq given over Q by the Weierstrass equation 

y 2 = x 3 + 75x + 125. 

N. Jones proved that although Eq has no rational torsion, the order of Eq(¥ p ) is divisible either by 
2 or by 3 for all p > 5. The curve Eq is of Mor dell- Weil rank 1, so the multiplication-by-d map 
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$ induces a nontrivial dynamical system T> = (£q,oo,$>). Taking, say, d = 7, we conclude that 
V is strongly residually periodic in the strongest possible sense: it has no periodic points but the 
residual system T> p has a fixed point for all p > 5 (compare with Example 1 1.7j) . 

On the other hand, N. Jones proved (unconditionally on Koblitz's conjectures) that for a "typical" 
elliptic curve E over Q an analogue of Lemma 16.81 indeed holds which implies that the dynamical 
system V is not strongly residually periodic for such an E, i.e. typically the answer to Question 
16.111 is negative. See the Appendix for more details. 

6.2. Verbal dynamical systems on group schemes. We view the calculations of Section [3] as 
a first step in attacking one of the most important conceptual questions left open after discovery of 
two- variable sequences characterizing finite solvable groups: for a sequence of words in the free group 
on two generators, to what extent the property to characterize the class of finite solvable groups is a 
property of general position, and what type of the dynamic behaviour is typical? Questions of such 
"nonbinary" type, which do not admit an answer of type "yes-no", have been considered by many 
mathematicians, from Poincare to Arnold, as the most interesting ones. Dynamics of word maps in 
free group, in spirit of [LP], (Laj , [Shj, [LS], [GS], led to a breakthrough in some classical problems 
of the theory of finite groups, and it may happen to play a crucial role in the above mentioned 
problem as well. Namely, a possible goal is to prove (or disprove) that for a sufficiently wide class of 
sequences the property to characterize the class of finite solvable groups holds in "general position" 
and is determined by its dynamics in the free group. In what follows F r stands for the free group 
on r generators. 

Question 6.12. Suppose that a sequence ~u = ui,u 2 , ■ ■ ■ ,u n , ... of elements of F2 satisfies the 
following conditions: 

(i) u n (a, 1) = u n (l,g) = 1 for all sufficiently big n, every group G, and all elements a,g £ G; 

(ii) if G is any group and a, g are elements of G such that u n (a, g) = 1, then for every m > n we 
have u m (a,g) = 1; 

(iii) no element of u equals 1 in F 2 ; 

(iv) there exists N such that for all n > N the word u n (x, y) belongs to the n-th derived subgroup 
F 2 {n) of F 2 . 

Is it true that if a finite group G satisfies an identity u n (x, y) = 1 for some n, then it is solvable? 

In connection with Question 16.121 it is natural to pose 

Problem 6.13. To describe the words in F2 satisfying conditions (i)-(iv) of Question 16.121 

Extensive MAGMA computations show strong numerical evidence of a positive answer to Ques- 
tion s.^! at least for the class of sequences ~u studied in |Rij : uq := u n := [gu n g~ l , hu n h~ l ], . . . , 
where /, g, h stand for some words from F2. 

One can put Question 16.121 into somewhat more general context. Towards this end, we suggest 
to combine the notions of verbal and AG dynamical systems defined in Section [TJ For simplicity 
we restrict ourselves to considering Z-dynamical systems. 

Definition 6.14. A verbal dynamical Z-system consists of the following setup: 

• positive integers r, s; 

• an r-tuple W = (wi, . . . , w r ) of words in the free group F r+S ; 

• an r-tuple J = (/1, . . . , f s ) of words in the free group F s (optional); 

• a group scheme Q of finite type over Z; 

• a set / C g r+s (Z). 

The following assumptions are to be satisfied. 

(i) Let Dy\j\ Q r+S — > g r + s be a morphism of Z-schemes defined on the group G = Q r+S {A) of 
A-points of Q r+S for every Z-algebra A by the formula 

(gi, . . . ,g s ,vi, . . . ,v r ) i-> (gi, ■ ■ .,g s ,wi(gi, ...,g s ,vi,.. . ,v r ), . . . ,w r {gi, . . . ,g s ,vi, . . .,v r ). 
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Then we assume that Dyy is dominant. 
(ii) The set I is invariant, i.e. Dyy(I) C /. 

Our earlier considerations (cf. Examples 11.21 and II .4[) naturally fit into this setting if Q is a 
semisimple Chevalley group scheme over Z (e.g., Q = SL(2,Z) as in the present paper). Indeed, 
in that case by a theorem of Borel ( [Boj . see also [Lap , the morphism Dyy is dominant, and we 
arrive at a verbal dynamical Z-system in the sense of Definition 16.141 Remark 13.81 shows that the 
dynamical systems on SL(2,p) relevant for our original problem, can be viewed as special fibres of 
the original verbal Z-system. 

Remark 6.15. It would be interesting to formulate a word-theoretic condition on W guaranteeing 
that for any Chevalley group scheme Q the morphism Dyy is dominant. 

In connection with Question 16.51 one can pose 

Problem 6.16. Given a verbal dynamical Z-system, that is not of fibred type, find conditions 
under which it is (strongly) residually periodic. 

In particular, it would be interesting to consider the system from Section 13.11 given by the map 
(f y : SX(2,Z) — > SX(2,Z) (y fixed) with I = {1}. This system has an invariant rational function, 
but it is not regular. It was proven in [BWW] that for 

-1 

1 

it is residually periodic. On the other hand, our numerical experiments give some evidence that it 
is not strongly residually periodic. 

We believe that verbal dynamical systems deserve more thorough study. To the best of our 
knowledge, most arithmetically interesting questions, in spirit of the monograph [Sil| (boundedness 
of periods, distributions of periods in reductions, various local-global problems), are widely open 
(or even not yet posed at all). 
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Appendix. Primes p for which #E(F P ) has only large prime factors 

Nathan Jones 
Al. Introduction 

Let E be an elliptic curve over Q of conductor Ne- For each prime p of good reduction for E, 
consider the group E(¥ p ) of F p -points of E. In 1988, Koblitz [3j conjectured a precise asymptotic 
formula for the number of good primes p up to x for which #E(F p ) is prime. 

Conjecture Al. There exists a precise constant &e > so that 

x f x \ 

#{p < x : p\ Ne and #E(F P ) is prime} = &e ■ — 5 ^ ( — T~ > 

log x V l°g x J 

as x — ► 00. 

In particular, provided the constant &e > 0, Conjecture Ad] implies that there are infinitely 
many primes p for which #E(F p ) is prime. In case &e = 0, one can prove (as a consequence of the 
Chebotarev density theorem) that #E(F p ) is prime for only finitely many primes p. 

Based on the precise form of the predicted constant &e, Koblitz further noted that &e is positive 
if and only if every other elliptic curve E' over Q which is Q-isogenous to E has no non-trivial 
rational torsion: 

&E > <^=^ (E' ~q E E'(Q) t0IS = {O e >}) . (A-l) 
However, because of a technical error in the underlying heuristic, the constant &e appearing 
in the original conjecture is incorrect. A refined conjecture, which in particular corrects &e, has 
recently been given by D. Zywina [8j. In the interest of consistency, let us henceforth understand 
the symbol &e appearing in Conjecture AfHto refer to the corrected constant Ce,x appearing in [SJ 
Conjecture 1.2] (we will describe this constant in more detail in Section \A2\) . Having thus replaced 
&E, the interpretation (|A-ip of exactly when &e is positive is no longer valid. We will show this 
in Section IA4I by exhibiting an elliptic curve E over Q for which the right-hand side of (|A-1[) is 
true, but for which &e = nevertheless. 

In spite of various partial results (see for instance pQ and the references therein), Conjecture A[T] 
is still open. Our goal is to prove the following theorem, wherein we relax "is prime" to "has only 
large prime factors." Let us denote by 

c e(p) '■= min{^ prime : t \ #E(F p )} 
the smallest prime divisor of #E(F P ). 
Theorem A2. Suppose that 

6e > 0, 

where &e is the constant appearing in Conjecture 421 Then the set 

{c E {p):p\N E } 

is unbounded. 

In other words, Theorem A[5]asserts that, for each x > 0, there exists a prime number p = p(E, x) 
such that for any prime number i we have 

I I #E{¥ P ) ^£ >x . 

We remark that one could likely prove something stronger by employing the appropriate tools. In 
the interest of brevity and simplicity, we content ourselves with Theorem A[2j 

We will begin by describing precisely the constant &e, from which it will be evident that the 
converse of Theorem A[2] holds, i.e. for any elliptic curve E over Q, one has 

6 E = => {c E {p) ■ p\ N E ] is bounded. (A-2) 
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V(p is prime and #E(F P ) is prime) ps 7- r^, (A-4) 



We will then prove Theorem Finally, we will discuss the issue of exactly when one has &e > 
and give an example of an elliptic curve E over Q for which &e = (and for which {ce(p) '■ p \ Ne} 
is bounded, thus illustrating (|A-2j) ) . Throughout, I and p will always denote prime numbers. 

A2. The heuristic of Conjecture ATJJand the constant 6^ 

The heuristic leading to Conjecture AQ]is analogous to the one which leads to the classical twin 
prime conjecture (see [3] and [8] for more details), and changes slightly depending on whether or 
not E has complex multiplication (CM). As usual, for p \ Ne, define the integer a E (p) by the 
formula 

#E(¥ P ) =:p+l-a E (p). (A-3) 
By a theorem due originally to Hasse, we have that |ae(p)| < 2^/p, and so the size of #E(F p ) is 
near the size of p. Thus, regarding p and #E(W„) as two independently chosen random positive 
integers of size x, the "probability" that they are both prime should satisfy 

1 

(log a;) 

by the prime number theorem. However, this prediction fails to take into account arithmetic infor- 
mation about the reductions of p and #E(F p ) modulo positive integers. In order to describe how 
one corrects the situation, we begin by recalling the division fields attached to E and Chebotarev 
density theorem. 

A2.1. The division fields Q(£J[rj]) of E. For each positive integer n > 1 denote by 

E[n] :={P£E(Q) : [n](P) = O e } 

the n-torsion of E and by Q(E[n\) the n-th division field of E, i.e. the field generated by the 
x and y coordinates of each P £ E[n]. The field Q(E[n]) is a Galois extension of Q, and by 
fixing a Z/nZ-basis of E[n], we may (and henceforth will) view Gal (Q(E[n])/Q) as a subgroup of 
GL 2 (Z/nZ): 

Gal(Q(£[n])/Q) C GL 2 (Z/nZ). 
The following proposition, which relates p and a^(p) with Q(S[n]) is well-known. In its state- 
ment &Q(E[n]) /q(p) C Gal (Q(E[n])/Q) C GL2(Z/nZ) denotes the conjugacy class of a Frobenius 
automorphism at p, which we view as a subset of GL2(Z/nZ). 

Proposition A3. For any positive integer n and any prime p of good reduction for E which does 
not divide n, p is unramified in Q(E[n]). Furthermore, 

tr(o-Q (S [ n ])/Q(>)) = a E(p) mod n 

and 

det(crQ (jB [ n ])/Q(p)) = p mod n. 

A2.2. The Chebotarev density theorem. Recall the Chebotarev density theorem [Jj. Let L/F 
be a (finite) Galois extension of number fields and C C Gal (L/F) any subset which is stable by 
Gal (L/i ? )-conjugation. Denote by the set of prime ideals of F and 

£f(x) : = {P e S F : N F/Q {p) < x}. 

For each prime ideal p £ S_f which is unramified in L, let o- L / F (p) ^ Gal (L/F) denote the conjugacy 
class of the Frobenius element attached to any prime of L lying over p. 

Theorem A4. (The Chebotarev density theorem) We have 

#{p G T,e(x) : p unramified in L and o~e/f(P) ^ C} j^C 
™ #S F (x) ~ # Gal (L/F)' 

In probabilistic terms, Theorem A3] says that the probability that a randomly selected prime 
ideal p satisfies a L/K (p) C C is #Ga f ( ^ /F) - 
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A2.3. Correcting the naive heuristic (|A-4j) . For any positive integer n and subgroup G < 
GL 2 (Z/nZ), define the subset n n {G) C G by 

n n (G) :={geG: det(g) + 1 - tv(g) $ (Z/nZ)*}. (A-5) 

MZ/nZ)* 

The probability that a large randomly chosen integer is coprime to n is — ; — ; — . On the other 

#(Z/nZ) 

hand, by (|A-3p . Proposition AS] and Theorem A31 the probability that #E(W p ) is coprime with n 

#(Gal (Q(E[n])/Q) - » n (Gal (QCgNVg))) 
#(Gal(Q(£[n])/Q)) 
Thus, it is natural to multiply (IA-41) by the correction factor 

#(Gal (Q(E[n])/Q) - fi n (Gal (Q(^[n])/Q))) 



#(Gal(Q(£[n])/Q)) 



(A-6) 



#(Z/nZ) 

Noting that 

S7 n (Gal (Q(£[n])/Q)) = vr" 1 (fi 5(n) (Gal (Q(E[5(n)])/Q))) , 
where <5(n) := n^|n^ denotes the square-free kernel of n and ir : GL2(Z/nZ) —» GL2(Z/5(n)Z) 
denotes the canonical projection, we see that (IA-6j) only depends on 6(n), and so it suffices to 
consider square- free n. Defining 

n = n(z):=Y[£ (A-7) 

e<z 

to be the square-free number supported on primes £ < z, we multiply (|A-4j) by (IA-6j) and take the 
limit as z —* oo, arriving at Conjecture [T] with 

/ #^ n( ,)(Gal(Q(^[n(z)])/Q)) \ 

6, := lim I I #Grf(Q(S[n(,)])/Q) J (A . 8) 

[J (1-1/f) 

£|n(z) 

Our next proposition describes &e in more detail. In particular, it implies that the limit in 
(1A-8|) converges to a finite positive limit, provided it is non-zero for each fixed z > 2. 

Proposition A5. Let E be an elliptic curve over Q and Zei &e be defined by (|A-8|) . There exists 
a positive square-free integer tie > 1 and a reaZ number Xe > so i/iaf 



1 



#fi* B (GaZ(Q(£[n B ])/Q))\ 



e #C7a/(Q(^[n i; ])/Q) 7 



Proof. In the CM case, this follows from [H Corollaire, p. 302] and in the non-CM case from [H 
(2), p. 260]. For more details, see 0. □ 

Although it won't be necessary in what follows, we remark that 
(1 i — r ( ... £ 2 -£-l 



Xe 



rn^-xW ^-^li). ) if £ has CM by K, 
n^- J^Tmh) ) if £ has no CM, 
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where in the CM case, G {±1} denotes the Kronecker symbol giving the splitting of I in the 
imaginary quadratic field K. 

Corollary A6. We have 

& E = ^ (3 square-free n , ?L no {Gal (Q(£[n ])/Q)) = GW(Q(£[n ])/Q)) . 

In particular, if (S_b = 0, then by ()A-3jl . Proposition A[3]and Theorem A0J we have 

p f n • N E gcd(#£(F p ), n ) > 1. (A-9) 

Since this in turn causes {ce(p) '■ p \ Ne} to be bounded, we have verified (|A-2|) . 

A3. Proof of Theorem A[2] 

To prove Theorem A[2l we will apply Theorem AH] with F = Q, L = Q(E[n}), and 

C = (Gal (Q(E[n])/Q) - ft n (Gal (Q(E[n])/Q))) , 

with £l n (G) as in (|A-5[) and n = n(z) as in ()A-7j) . Fix any prime p > z which doesn't divide Ne- By 
Proposition AO p is unramified in Q(E[n(z)]) and furthermore we have the following equivalence: 

(W < z, l\#E(¥ p )) ^ aQ { E{n(z)])/Q(p) £ ^n(z) (Gal (Q(E[n(z)] )/Q)) . (A-10) 
Now consider the Chebotarev factor 

_ #(Gal(Q(£[n(z)])/Q) - n w(z) (Gal(Q(£[n(z)])/<q>))) 
#(Gal(Q(£7[n(*)])/Q)) 

By Corollary we see that 

6 E > =>■ £> 2 > 0. 

Thus, provided &e > 0, Theorem AH] implies the existence of a prime number p\ = pi(E,z) for 
which 

)])/q(pi) £ n„ ( ,)(Gal((Q)(E[n( Z )])/(Q>)). 
By (|A-10p . we see that for each £ < z, £ does not divide #E(W Pl ), and so ce(pi) > z. Since z was 
arbitrary, Theorem A[2] follows. 

A4. The positivity of 6e 

It is now natural to ask: under what conditions is the constant &e positive? Because of the 
Weil Pairing (see [Sj, for example), for any level n, we have that the determinant map restricts to 
a surjection 

det: Gal(q(E[n(z)])/Q) -» (Z/n(z)Z)*. 
By Corollary A[6l we are thus led to ask the following question. 

Question A7. Let n > 1 be a positive square-free integer, and let G < GL2(Z/nZ) be a subgroup 
for which the determinant map restricts to a surjection: 

det: G^> (Z/nZ)*. 

Under which circumstances do we have Q n (G) = G? 

It is clear from the definitions that, for any £ dividing n we have 

n e (G mod £) = G mod £ = G. 

We join Serre [U 1-2] in leaving the following exercise up to the reader. 

Exercise A8. Prove that, for any subgroup Gg < GL2(Z/£Z), £l(Gf) = Gi if and only if either 

^ {(;:)} - G ' £ {(o0}- 
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Furthermore, Gal (Q(E[£])/<Q) = Gi as above if and only if E is isogenous over Q to some elliptic 
curve E' over Q satisfying _E'[£](Q) ^ {Oe>} (in the first case, E' is simply E). We record this as 

Remark A9. If E is Q-isogenous to some elliptic curve E' over Q for which -E'(Q)tors 7^ {Og'}, 
then & E = 0. 

It is tempting to expect (as Koblitz did) that the converse of Remark A0 also holds, but the 
following example shows that this is not the case. Let £ 7^ 2 be any prime and consider the subgroup 
G < GL 2 (Z /2Z) x GL 2 (Z/£Z) defined by 

G = {{32,91) G GL 2 (Z/2Z) x G X {Z/£Z) : X2 ( 52 ) = (A-ll) 

where 

G X {Z/£Z) := I ^ f) } < GL 2 (Z/£Z) (A-12) 

and the characters \i and Yi are defined by 

X 2 ■ GL 2 (Z/2Z) — ► GL 2 (Z/2Z)/[GL 2 (Z/2Z), GL 2 (Z/2Z)] ~ {±1} 

and 

»((*' 0)" ±L (A " 13) 

Notice that, even though 

n 2 (G mod 2) C G mod 2 and 1^(G mod £) C G mod £, 

we have n 2e (G) = G. Provided we can find an elliptic curve E over Q with Gal (Q(E[2£])/Q) < G, 
then #E(¥p) will only be prime finitely often because whenever it is not divisible by 2, it must be 
divisible by £, and vice versa. 

A4.1. A counterexample to (|A-ip . 

Proposition A10. Let E be the elliptic curve defined by the Weierstrass equation 

y 2 = x 3 + 75x + 125. 

For any elliptic curve E' over Q which is Q-isogenous to E, one has E'(Q)t rs — {Qe 1 }- Never- 
theless, &e = 0. Furthermore, the Mordell-Weil group attached to E is infinite: 

#E(Q) = oo. 

Proof. Since Ne = 2 2 • 3 3 • 5 2 , we see that E has good reduction away from p G {2,3,5}. One 
calculates that #E(¥j) = 4 and #E(¥n) = 21, from which it follows that, for any E' over 
Q which is Q-isogenous to E, we have E'(Q) tOTS — {C^'}- On the other hand, recall that 
Q(E[2}) = Q(the roots of x 3 + 75x + 125), so that = 2 2 • 3 • 5 3 v /3 15 G Q(E[2]). Also, 

the point (-S^v 73 !^) G E[3](Q(y/ -15)) shows that 

Q( y 7 ^) = Q(\/ = T5) C Q(E[2))f] Q(E[3}). 

It follows that, taking £ = 3 in (jA-1 1[) . we have Gal (Q(E[6])/Q) < G, where X2 and X£ correspond 
to the restriction map 

Gal(Q(£[6])/Q) — Gal(Q( v / A^)/Q) ^ {±1}- 

Taking no = 6 in Corollary AEJ we see that S^; = 0. 

Finally, the point (5,25) G E(Q) is of infinite order, and so #E(Q) = oo, as claimed. □ 
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Furthermore, one can readily verify (IA-9j) with no = 6 and E as in Proposition AI10|, as follows. 
For any rational prime p > 7 and choice of Frobenius automorphism a§{p) G (7q(b[6])/q(p)i we have 
that 

<t 6 (p)(\/A^) = V&e => *q(J5[ 3 ])/q(p) C n 3 (Gal(Q(£?[3])/Q)) 3 | #£(F p ) 

and 

^(pXv^) = -VAs <tq(e[2])/q(p) Q 2 (Gal(Q(£[2])/Q)) ^ 2 | #E(¥ P ). 
Since \/Ab = 2 2 • 3 • 5 3 V — 15, it follows that for p { 30, we have 

(^) = 1 =► 3 | #£(F P ) 

and 

(^) = -1 2 | #£(F p ). 

This verifies (IA-9P and shows that 

{c E (p):p\N E } = {2,3}. 

More generally, we have 

Remark All. If E is Q-isogenous to some elliptic curve E' over Q for which £"(Q(v / A^7))t rs 7^ 
{O e >}, then & E = 0. 

Have we covered all possible cases where &e = 0? We will now give an example of a subgroup 
G < GL2(Z/3£7j) satisfying Q^i(G) = G, where t > 5 is some prime. Let 

and define 

G := {(fl5,<tt) G A/3 x Gi(Z/«) : detg 3 = Xife)}, 

where Gi(Z/£Z) and are as in (|A-12p and (|A-13p . respectively, and we are regarding det(g^) G 
F3 = {±1}. As before, we have 

Q 3 (G mod 3) C G mod 3 and Q e (G mod) C G mo*, 

but [^(G) = G. Perhaps there may also be an elliptic curve E over Q with Gal (Q(£'[3^])/Q) < G, 
though we haven't explicitly exhibited one. 

A4.2. Serre curves. A Serre curve is an elliptic curve E over Q for which 

Vn > 1, [GL 2 (Z/nZ) : G E {n)} < 2. 

(Intuitively, a Serre curve is an elliptic curve for which Gal (Q(E[n])/Q) is "as large as possible" 
for each n > 1.) We remark that, as shown in [8j Proposition 4.2], we have 

E is a Serre curve =>• &e > 0. 

When ordered according to naive height, almost all elliptic curves are Serre curves (see [2]). Thus, 
for a "typical" elliptic curve E over Q one has &e > 0. 
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A5. Concluding remarks 

As mentioned in the introduction, one can likely prove stronger forms of Theorem A[5J For 
instance, one could probably use an effective version of the Chebotarev density theorem to obtain 
a quantitative upper bound for the smallest prime p for which ce(p) > x. 

Since we have not completely resolved it, we record here 

Question A12. Under what conditions do we have &e > 0? 

The examples discussed in Section IA4I seem to indicate that this question is more delicate than 
it first may seem. Conjecture AH has also been generalized to the context where E is defined over 
a general number field K (see [8]), in which case the answer to Question AI12I may become even 
more delicate. 
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